CWE-908Use of Uninitialized Resource

Abstraction: Base · CVEs in our corpus: 837

The product uses or accesses a resource that has not been initialized.

When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.

Last updated: 21 August 2026 00:24 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2023-24941`	9.9	9.8	0.9468	2023-05-09
`CVE-2008-0081`	9.5	9.8	0.5791	2008-01-16
`CVE-2012-1891`	8.8	9.8	0.2941	2012-07-10
`CVE-2021-40418`	8.5	9.8	0.1794	2021-12-22
`CVE-2025-5777` KEV	8.5	7.5	0.9996	2025-06-17
`CVE-2008-3475`	8.3	8.8	0.3986	2008-10-15
`CVE-2019-9641`	8.2	9.8	0.0940	2019-03-09
`CVE-2025-50165`	8.2	9.8	0.0952	2025-08-12
`CVE-2019-0006`	8.0	9.8	0.0526	2019-01-15
`CVE-2015-8390`	7.9	9.8	0.0462	2015-12-02
`CVE-2018-5095`	7.9	9.8	0.0421	2018-06-11
`CVE-2018-14551`	7.9	9.8	0.0403	2018-07-23
`CVE-2019-12730`	7.8	9.8	0.0303	2019-06-04
`CVE-2019-7321`	7.8	9.8	0.0321	2019-06-13
`CVE-2019-5067`	7.8	9.8	0.0341	2019-09-18
`CVE-2019-15900`	7.7	9.8	0.0211	2019-10-18
`CVE-2020-24753`	7.7	9.8	0.0264	2020-09-17
`CVE-2018-25014`	7.7	9.8	0.0223	2021-05-21
`CVE-2007-1751`	7.6	0.0	0.6084	2007-06-12
`CVE-2009-1529`	7.6	8.1	0.2874	2009-06-10
`CVE-2020-35878`	7.6	9.8	0.0152	2020-12-31
`CVE-2020-35888`	7.6	9.8	0.0152	2020-12-31
`CVE-2021-26305`	7.6	9.8	0.0169	2021-01-29
`CVE-2021-26951`	7.6	9.8	0.0173	2021-02-09
`CVE-2021-29936`	7.6	9.8	0.0133	2021-04-01